
$ rpki-client -vvf rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft
File: 1345157B61F361F583DCB52DB3ECBCA10862599B.mft (raw, json)
Hash identifier: A/6xeCqxSU0mAoy0fgDpy8QsmsZsmx5z3dx5GTChxvs=
Subject key identifier: 65:D7:8E:5C:CD:9F:B7:6D:FF:80:4E:08:AC:FB:73:B9:EF:99:10:3B
Authority key identifier: 13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B
Certificate issuer: /CN=1345157B61F361F583DCB52DB3ECBCA10862599B
Certificate serial: 53AF0D73CFB94F8301ED601AD0EBC57968DB1027
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:06:53 +0000
Manifest this update: Fri 24 Jul 2026 02:01:53 +0000
Manifest next update: Sat 25 Jul 2026 02:35:53 +0000
Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: jNEFs2GtzFKSgVBlfyDoiMOmxKN4+FK/qSYbZvqpibs=)
2: 1345157B61F361F583DCB52DB3ECBCA10862599B.crl (hash: XnX08cbMdPKzmIJ6dJPWOpDdOcPzTiI56FXYWKKH9EI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl
rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:af:0d:73:cf:b9:4f:83:01:ed:60:1a:d0:eb:c5:79:68:db:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1345157B61F361F583DCB52DB3ECBCA10862599B
Validity
Not Before: Jul 24 02:01:53 2026 GMT
Not After : Jul 25 02:35:53 2026 GMT
Subject: CN=65D78E5CCD9FB76DFF804E08ACFB73B9EF99103B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:77:1a:27:af:1f:07:d6:73:59:66:c9:d5:
fc:66:18:91:85:df:d4:5d:f7:c6:ec:f0:71:6d:65:
04:1c:d8:d1:d6:94:2d:9f:19:13:1a:57:c0:22:6d:
0e:73:38:cc:01:9e:b3:15:30:e2:f0:c2:8b:70:4b:
ec:d0:20:95:c2:45:9e:e6:b7:c8:19:9a:dd:25:dd:
87:70:3d:a7:54:ee:69:b1:3b:ef:6d:3d:f5:31:8b:
db:2a:2a:09:c1:d6:88:72:c4:82:24:f5:99:9b:96:
56:db:5e:08:49:d7:3c:6f:1f:91:56:d6:23:1e:bb:
fa:55:4f:ac:04:c3:eb:ed:dd:5e:84:86:89:0f:92:
53:e6:5f:a4:e5:78:d9:11:a4:80:17:2a:d9:19:6a:
57:3f:e2:62:de:34:13:66:a1:02:50:eb:fd:e5:3b:
04:7a:be:ab:d1:70:30:5b:5b:c9:1b:73:59:9d:bc:
ec:50:e6:ab:22:9b:bf:e2:8a:aa:d1:43:1a:00:f5:
5a:0c:ff:d7:fe:a7:e3:72:77:e8:c3:24:bf:5b:76:
5c:d0:94:05:be:2b:ae:2b:18:ad:5c:98:59:0e:f5:
54:ef:1d:c5:bd:13:f0:e7:b2:20:70:33:08:aa:a2:
55:81:59:09:ae:b3:bc:e9:52:1c:89:69:98:ee:ec:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:8E:5C:CD:9F:B7:6D:FF:80:4E:08:AC:FB:73:B9:EF:99:10:3B
X509v3 Authority Key Identifier:
keyid:13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:91:3e:77:d9:14:07:13:4a:0d:87:40:7e:80:66:5e:22:ca:
f0:01:5a:d9:99:52:69:a9:f2:ac:2e:85:35:5a:62:14:4b:f7:
6b:f5:e7:67:6f:3d:ee:aa:11:4e:23:cc:c4:3d:10:4a:d9:8e:
6b:a6:23:84:75:e1:d0:dc:54:27:25:ed:d0:85:9f:5e:25:c5:
01:07:28:f8:bc:9c:f4:d9:aa:13:8d:9d:a4:21:6e:34:d0:0a:
2d:a4:2f:a9:8f:af:0b:04:30:6d:68:a9:84:57:2d:0d:d4:e6:
99:5d:de:07:13:c8:b9:35:c6:5f:47:47:17:78:51:a2:11:2c:
6b:e9:16:e1:77:ab:a9:87:1c:81:53:a9:77:8a:c1:f9:e3:9e:
5a:7a:a7:0d:8f:ff:3e:16:5c:ba:25:ab:ec:3d:2a:26:94:1b:
2b:16:d6:7d:d1:e5:e3:d0:eb:a5:ba:e7:0c:52:2c:f5:59:55:
cf:1b:48:d8:84:db:21:e9:8d:87:9f:cf:56:d3:a6:6b:4d:92:
12:9c:cc:7b:e0:17:74:92:81:00:90:71:f4:b6:ef:ec:3b:c6:
3f:f1:df:81:38:e2:81:97:90:ee:fb:2e:8d:44:e4:b9:03:5c:
c8:ec:86:48:4c:f3:cf:a0:a8:5a:d8:90:29:77:8f:a0:d5:c8:
8c:f9:c3:e2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU68Nc8+5T4MB7WAa0OvFeWjbECcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0NTE1N0I2MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEw
ODYyNTk5QjAeFw0yNjA3MjQwMjAxNTNaFw0yNjA3MjUwMjM1NTNaMDMxMTAvBgNV
BAMTKDY1RDc4RTVDQ0Q5RkI3NkRGRjgwNEUwOEFDRkI3M0I5RUY5OTEwM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxy3caJ68fB9ZzWWbJ1fxmGJGF
39Rd98bs8HFtZQQc2NHWlC2fGRMaV8AibQ5zOMwBnrMVMOLwwotwS+zQIJXCRZ7m
t8gZmt0l3YdwPadU7mmxO+9tPfUxi9sqKgnB1ohyxIIk9ZmbllbbXghJ1zxvH5FW
1iMeu/pVT6wEw+vt3V6EhokPklPmX6TleNkRpIAXKtkZalc/4mLeNBNmoQJQ6/3l
OwR6vqvRcDBbW8kbc1mdvOxQ5qsim7/iiqrRQxoA9VoM/9f+p+Nyd+jDJL9bdlzQ
lAW+K64rGK1cmFkO9VTvHcW9E/DnsiBwMwiqolWBWQmus7zpUhyJaZju7KPrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZdeOXM2ft23/gE4IrPtzue+ZEDswHwYDVR0j
BBgwFoAUE0UVe2HzYfWD3LUts+y8oQhiWZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODVlZTQwZGMtNTFiYS00NzY5LTg2MTktMjI4OWNjZTk2MjllLzAvMTM0NTE1N0I2
MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEwODYyNTk5Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMzQ1MTU3QjYxRjM2MUY1ODNEQ0I1MkRCM0VDQkNBMTA4NjI1
OTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2
MTktMjI4OWNjZTk2MjllLzAvMTM0NTE1N0I2MUYzNjFGNTgzRENCNTJEQjNFQ0JD
QTEwODYyNTk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA+RPnfZFAcTSg2HQH6AZl4iyvABWtmZUmmp
8qwuhTVaYhRL92v152dvPe6qEU4jzMQ9EErZjmumI4R14dDcVCcl7dCFn14lxQEH
KPi8nPTZqhONnaQhbjTQCi2kL6mPrwsEMG1oqYRXLQ3U5pld3gcTyLk1xl9HRxd4
UaIRLGvpFuF3q6mHHIFTqXeKwfnjnlp6pw2P/z4WXLolq+w9KiaUGysW1n3R5ePQ
66W65wxSLPVZVc8bSNiE2yHpjYefz1bTpmtNkhKczHvgF3SSgQCQcfS27+w7xj/x
34E44oGXkO77Lo1E5LkDXMjshkhM88+gqFrYkCl3j6DVyIz5w+I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:34 2026 by rpki-client